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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the application: 
Listing of Claims: 

1 1 . (Currently amended): A method for accessing information in an 

2 information store in accordance with an access policy, said method comprising: 

3 receiving an access request comprising a request for a first type of information, 

4 wherein said request for a first type of information has associated therewith first information 

5 contained in said information store; 

6 replacing said request for a first type of information with a modified request for a 

7 first type of information, wherein said modified request being-isbased on said access policy; and 

8 accessing said information store to produce a result in response to said access 

9 request, wherein said result comprises rows of information, wherein each row of information 

10 includes either an instance of said first informatio^or^ masked value in place of an instance of 

11 said first information depending modifi e d requ e st produc e s e ith e r a masked valu e or said first 

12 information, bas e d on said access policy. 

1 2. (Currently amended): The method of claim 1 wherein said modified 

2 request includes a mask function which determines for a row whether said row includes an 

3 instance of said first information^ a masked value in place of an instance of said first 

4 information . 

1 3. (Original): The method of claim 2 wherein said accessing includes 

2 executing said mask function to produce either said masked yalue or said first information. 

1 4. (Currently amended): The method of claim 1 further including modifying 

2 said access request to include a filter function, said filter function effective for eliminating 

3 portions of one or more of said result -rows of information in accordance with said access policy. 
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1 5. (Currently amended): The method of claim 1 wherein said information 

2 store is a relational database and said request for a first type of information comprises a SELECT 

3 statement, said SELECT statement comprising one or more column references, said modified 

4 request comprising a replacement of at least one of said one or more column references with a 

5 mask function , each column reference identifying a specific column in said relational database . 

1 6. (Currently amended): The method of claim 1 wherein said information 

2 store is a relational database and said access request includes a WHERE clause, said r es ult 

3 comprising on e or mor e rows of information, said method further including incorporating a filter 

4 function in said WHERE clause to remove certain rows contained in said result, based on said 

5 access policy. 

1 7. (Currently amended): In a relational database, a method for accessing 

2 information in accordance with an access policy, said method comprising: 

3 providing at least one query comprising a SELECT statement, said SELECT 

4 statement comprising one or more column references , each column reference identifying a 

5 specific column in said relational database ; 

6 replacing at least one of said one or more column references with a mask function 

7 to produce a modified query; and 

8 producing a query result in response^said modified query comprising one or 

9 more rows of information^ ^^^Tmiif Jf J^^^ 

10 [\l^y wherein some rows of information comprise entirely of information from said 

.11 ^ relational database, and other rows of information comprise information from said relational 

12 database and a mask value, depending on said access policy. 

13 wher e in said qu e ry r e sult includes, for said at l e ast on e of said one or mor e 

14 column r e ferenc e s, e ith e r mask valu e s or information from said relational databas e , bas e d on 

15 said acc e ss policy. 
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1 8. • (Original): The method of claim 7 wherein said at least one query further 

2 comprises a WHERE clause, said method further including modifying said WHERE clause to 

3 produce a modified WHERE clause which includes a filter function, said filter function 

4 producing one of two logical values, said modified WHERE clause effective for deleting a row 

5 from said query result based on a value produced by said filter function. 

1 9. (Currently amended): The method of claim 7 wherein said relational 

2 database in-is_provided in a database server; said step of providing includes receiving said at least 

3 . one query at a client system; and said step of producing includes transmitting said modified 

4 query to said database server. 

1 10. (Original): The method of claim 9 wherein said step of replacing is 

2 performed at said client system. 

1 11. (Original): The method of claim 9 wherein said step of replacing is 

2 performed at said database server. 

1 12. (Currently amended): A computer-based information retrieval system 

2 comprising: 

3 computer memory having computer readable program code embodied therein for 

4 accessing an information store in accordance with an access policy, said computer readable 

5 program code comprising: 

6 first code configured to receive an access request for a first type of 

7 information, wherein said request for a first type of information has associated therewith first 

8 information; 

9 second code configured to replace said request for a first type of 

10 information with a modified request for a first type of information, wherein said modified 

1 1 request bemg-is^based on said access policy; and 

12 third code configured to access said information store to produce a result 

13 in response to said access request, wherein said result comprises rows of information, wherein 
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14 each row of information includgfej^ of said first information or a masked value in 

15 place of an instance of said first information depending , based on said access policy. 

1 13. (Currently amended): The system of claim 12 further including fourth 

2 code configured to modify said access request to include a filter function, said filter function 

3 effective for eliminating portions of one or more of said result -rows of information in accordance 

4 with said access policy. 

1 14. (Currently amended): The system of claim 12 further including a 

2 relational database and said request for a first type of information comprises a SELECT 

3 statement, said SELECT statement comprising one or more column references, said modified 

4 request comprising a replacement of at least one of said one or more column references with a 

5 mask function , each column reference identifying a specific column in said relational database . 

1 15. (Currently amended): The system of claim 12 further including a 

2 relational database and said access request includes a WHERE clause, said r e sult comprising one 

3 or mor e rows of information, said second code further configured to incorporate a filter function 

4 in said WHERE clause to remove certain rows contained in said result, based on said access 

5 policy. 

1 16. (Original): The system of claim 12 further including a client computer 

2 system and a server computer system, said client computer system comprising a portion of said 

3 computer memory embodying said first and second codes, said server computer system 

4 comprising another portion of said computer memory embodying said third code. 

1 17. (Currently amended): The system of claim 12 wherein said database 

2 server is a relational database server, said request for a first type of information comprises a 

3 SELECT statement, said SELECT statement comprising one or more column references, said 

4 modified request comprising a replacement of at least one of said one or more column references 

5 with a mask function , each column reference identifying a specific column in said relational 

6 database. 
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1 1 8. (Currently amended): The system of claim 1 7 wherein said third code 

2 includes ji mask function which determines for a row whether said row includes an instance of 

3 said first information or a masked value in place of an instance of said first information . 

1 19. (Currently amended): The system of claim 1 6 wherein said database 

2 server is a relational database server, said access request includes a WHERE clause, said r e sult 

3 comprising one or mor e rows of information, said second code further configured to incorporate 

4 a filter function in said WHERE clause to remove certain rows contained in said result, based on 

5 said access policy. 

1 20. (Currently amended): The system of claim 19 wherein said third code 

2 includes amask function which determines for a row whether said row includes an instance of 

3 said first information or a masked value in place of an instance of said first information . 
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